# Salesforce Identity and Access Management Architect Practice Exam *Last updated September 2026 · https://www.certifyforce.com/salesforce-identity-access-management-architect-practice-exam* The Salesforce Identity and Access Management Architect certification is an advanced Salesforce credential with no prerequisite. It is designed for identity professionals who want to demonstrate their knowledge, skills, and capabilities at assessing identity architecture; designing secure, high-performance access management solutions on the Customer 360 platform; and communicating technical solutions effectively to business and technical stakeholders. The exam has 60 scored questions plus 5 unscored questions, a 120-minute time limit, and a 65% passing score. Its official outline covers 6 weighted sections, the largest being Accepting Third-Party Identity in Salesforce at 21% of the exam. This architect-track exam goes deep on SSO, OAuth flows, identity providers, and access management patterns. It is one of the tougher Salesforce exams to pass without focused scenario practice. ## How long is the Identity and Access Management Architect exam and what score do you need? | Fact | Value | | --- | --- | | Certification | Salesforce Platform Identity and Access Management Architect | | Formerly | Salesforce Certified Identity and Access Management Architect | | Level | Advanced | | Prerequisite | None | | Scored questions | 60 | | Unscored questions | 5 | | Time limit | 120 minutes | | Passing score | 65% | | Registration cost | USD $400 | | Retake cost | USD $200 | | Exam outline sections | 6 | Facts last verified against the [official Salesforce exam guide](https://help.salesforce.com/s/articleView?id=005298975&language=en_US&type=1) in July 2026. ## What is on the Salesforce Identity and Access Management Architect exam? The official outline has 6 weighted sections. Mock exams draw questions in these proportions, so practice mirrors the real exam. | Exam section | Weight | | --- | --- | | Identity Management Concepts | 17% | | Accepting Third-Party Identity in Salesforce | 21% | | Salesforce as an Identity Provider | 17% | | Access Management Best Practices | 15% | | Salesforce Identity | 12% | | Community (Partner and Customer) | 18% | ### Identity Management Concepts (17%) - Describe common authentication patterns and understand the differences between each one. - Describe the building blocks that are part of an identity solution (authentication, authorization, accountability) and how to enable. - Describe how trust is established between two systems. - Given a scenario, recommend the appropriate method for provisioning users in Salesforce. - Given a scenario, troubleshoot common points of failure that may be encountered in a single sign-on solution (SAML, OAuth, etc.). ### Accepting Third-Party Identity in Salesforce (21%) - Given a use case, describe when Salesforce is used as a Service Provider. - Given a scenario, recommend the most appropriate way to provision users from identity stores in business-to-employer (B2E) and business-to-consumer (B2C) scenarios. - Given a scenario, recommend the authentication mechanism when Salesforce needs to accept 3rd Party Identity. - Given a scenario, identify the ways that users can be provisioned in Salesforce to enable SSO and apply access rights. - Given a scenario, identify the auditing and monitoring approaches available on the platform, and describe the tools available to diagnose issues. ### Salesforce as an Identity Provider (17%) - Given a scenario, identify the most appropriate OAuth flow (Web based, JWT, User agent, Device auth flow). - Given a scenario, recommend appropriate scope and configuration of the connected app for authorization. - Describe the various implementation concepts of OAuth (scopes, secrets, tokens, refresh tokens, token expiration, token revocation, etc.). - Given a scenario, recommend the Salesforce technologies that should be used to provide identity to the 3rd party system. ### Access Management Best Practices (15%) - Given a set of requirements, determine the most appropriate methods of multi-factor authentication (MFA) to use, and the right type of session they should yield. - Given a scenario, determine how to best assign roles, profiles, and permission sets to a user during the SSO process, how to keep these assignments up to date. - Given a scenario, describe which tools you can apply to audit and verify the activity/user during and after login. - Given a scenario, identify the configuration settings for a Connected App. ### Salesforce Identity (12%) - Given a set of requirements, identify the role Identity Connect plays in a Salesforce Identity implementation. - Given a scenario identify if Salesforce Customer 360 Identity fits into fully a developed Customer 360 solution. - Give a set of requirements, recommend the most appropriate Salesforce license type(s). ### Community (Partner and Customer) (18%) - Describe the capabilities for customizing the user experience for Experience Cloud. - Given a set of requirements, determine the best way to support external IdPs in communities and leverage the right user/contact model to support community user experience. - Given a requirement, understand the advantages and limitations of External Identity solutions and associated licenses. - Given a scenario, determine when to use embedded login. ## How many reviewed Identity and Access Management Architect practice questions are there? 300 reviewed questions. Every question follows the current official Identity and Access Management Architect exam outline and is checked against Salesforce documentation before it is published. A full practice exam has 60 questions and a 105-minute time limit, with the same mix of sections as the real exam. You can also practice one section at a time. | Exam section | Weight | Reviewed questions | | --- | --- | --- | | Identity Management Concepts | 17% | 51 | | Accepting Third-Party Identity in Salesforce | 21% | 63 | | Salesforce as an Identity Provider | 17% | 51 | | Access Management Best Practices | 15% | 45 | | Salesforce Identity | 12% | 36 | | Community (Partner and Customer) | 18% | 54 | | Total | 100% | 300 | ## Common questions about the Identity and Access Management Architect exam ### How many questions are on the Salesforce Identity and Access Management Architect exam? The Identity and Access Management Architect exam has 60 scored questions plus 5 unscored questions, with a time limit of 120 minutes. ### What is the passing score for the Identity and Access Management Architect exam? The passing score is 65%. Certifyforce's readiness score weights your practice results by the official section weights so you know whether you'd clear that bar. ### How much does the Identity and Access Management Architect exam cost? Registration is USD $400 plus applicable taxes, and retakes cost USD $200. Quality practice is the cheapest way to avoid paying for a retake. ### Is there a prerequisite for the Identity and Access Management Architect exam? No. The Identity and Access Management Architect exam has no certification prerequisite. Salesforce positions it as a advanced credential. ### How many practice questions are in the Identity and Access Management Architect question bank? 300 reviewed questions across all 6 sections of the current official exam outline. Every question is checked against Salesforce documentation before it is published. A timed practice exam draws 60 questions and gives you 105 minutes, with the same mix of topics as the real exam. ### Are these real exam questions or braindumps? No. Certifyforce writes original practice questions aligned to the official exam outline. Using leaked exam questions (dumps) violates the Salesforce certification agreement and can get your credentials revoked — original scenario practice builds the same skills without the risk. ### What topics are on the Identity and Access Management Architect exam? The exam covers 6 sections: Identity Management Concepts (17%), Accepting Third-Party Identity in Salesforce (21%), Salesforce as an Identity Provider (17%), Access Management Best Practices (15%), Salesforce Identity (12%), Community (Partner and Customer) (18%). ### How is Certifyforce different from other practice exams? The Identity and Access Management Architect questions follow the current official exam outline. Every question is reviewed by a person and checked against Salesforce documentation. You can see your score by section and practice the topics you missed without taking the full exam again. ## Related pages - [Salesforce Salesforce Architect certification path](https://www.certifyforce.com/salesforce-certifications/architect) - [Salesforce Integration Architect practice exam](https://www.certifyforce.com/salesforce-integration-architect-practice-exam) - [All Salesforce certifications](https://www.certifyforce.com/salesforce-certifications) - [Official Identity and Access Management Architect exam guide](https://help.salesforce.com/s/articleView?id=005298975&language=en_US&type=1)